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Abstract 

CI So 's a steganographic scheme proposed in the information hiding literature, 
belonging into the small category of algorithms being both stego and topologically 
secure. Due to its stego-security, this scheme is able to face attacks that take place 
into the "watermark only attack" framework. Its topological security reinforce 
its capability to face attacks in other frameworks as "known message attack" or 
"known original attack", in the Simmons' prisoner problem. In this research work, 
the study of topological properties of CI Si is enlarged by describing this scheme 
as iterations over the real line, and investigating other security properties of topo- 
logical nature as the Lyapunov exponent. Results show that this scheme is able to 
withdraw a malicious attacker in the "estimated original attack" context too. 

Keywords: Information Hiding, Steganography, Security, Topology. 

1 Introduction 



The first fundamental work in information hiding security was realized by Cachin in 
the early '00s, in the context of steganography [;6:|: attempts of an attacker to make the 
distinction between an innocent image and a stego-content was rewritten in this arti- 
cle as a hypothesis testing problem. The basic properties of a stegosystem are defined 
by Cachin using the notions of entropy, mutual information, and relative entropy. At 
the same time, Mittelholzer has proposed the first theoretical framework for analyzing 
the security in the second category of algorithms studied by the information hiding 
community, namely the digital watermarking ifTTl . These efforts to bring a theoreti- 
cal framework for security in steganography and watermarking have been followed up 
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by Kalker, who tries to clarify the concepts (robustness vs. security), and the classifi- 
cations of watermarking attacks iTPfl . This work has been deepened by Furon et ah, 
who have translated Kerckhoffs' principle (Alice and Bob shall only rely on some pre- 
viously shared secret for privacy), from cryptography to data hiding lfl2l . They used 
Diffie and Hellman methodology, and Shannon's cryptographic framework ||20l , to 
classify the watermarking attacks into categories, according to the type of information 
Eve has access to lfl8l . namely: Watermarked Only Attack (WOA), Known Message 
Attack (KMA), Known Original Attack (KOA), Constant-Message Attack (CMA), and 
Estimated Original Attacks (EOA). 

Levels of security have been recently defined in these setups. The highest level of 
security in WOA is called stego-security [7], whereas topological security tends to im- 
prove the ability to withstand attacks in KMA, KOA, and CMA setups ifTTl . In order to 
enlarge our knowledge of the level of security of a steganographic scheme, the quantity 
of disorder generated by the chaos of its topological security can be measured evalu- 
ating the well-known Lyapunov exponent |[T6l [151 [T| . The evaluation of this exponent 
allow to characterize the ability of the scheme to face an attacker in the context of an 
EOA. 

The first contribution of this article consists in some relation established between 
how fine is a topology and the chaotic behavior of a dynamical system described with 
this topology. The second contribution is the security study of a previously released 
stego and topologically secure steganographic scheme called CIS2, on a new topolog- 
ical space, namely the real line numbers R. On this new space, the topological security 
of CIS2 is firstly evaluated, and its Lyapunov exponent is then computed, in order to 
quantify its level of disorder. Incidentally, this computation allows to measure the re- 
sistance of the CIS2 scheme against a category of attacks called Estimated Original 
Attack. This study follows a same canvas than a previous work dealing with digital 
watermarking, but it is conducted here for a steganographic scheme. To achieve this 
work, a new semi-conjugacy model must be written for the scheme CIS2, which is 
then established and proven here. 

This document is organized as follows. In Section [2] some basic notations and 
terminologies are given and definitions taken from the mathematical topology are re- 
called. Notions and firsts results concerning the mathematical theory of chaos are in- 
troduced in the next section. Then, in Section|4] security notions and classes of attacks 
under consideration in the information hiding community are recalled. In Section [5] 
the steganographic scheme studied in this document is presented, and the formalization 
allowing its topological security evaluation is given in the next section. This model is 
then used in Section|7]to design a new semi-conjugacy allowing its security study on a 
new space (Sect. [8]), and its Lyapunov exponent is finally evaluated in Section [9] This 
paper ends by a conclusion section where our contribution is summarized and intended 
future researches are given. 

2 Basic Reminders 

In what follows, B denotes the Boolean set {0,1}, S n stands for the n th term of a 
sequence S, V, is for the i th component of a vector V, and [[0;iV] is the integer interval 
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{0,1,... ,N}. Furthermore, the following definitions will be used in this document. 

Definition 1 The discrete Boolean metric is the application 8 : IB — > B defined by 

8{x,y) =0<$x = y. 

Definition 2 The vectorial negation is the function fy : B N — > B N defined by fo {(bo, ■■■ , &N-i)) = 
(bo, ■ ■ ■ ,^n-i), where x is the negation of the Boolean x. 

Definition 3 A strategy adapteris a sequence which elements belong into [1 , k], where 
k £ IN*. The set of all strategies having terms in [1 , k] is denoted by §k- 

Definition 4 For k £ IN*, the initial function is the map 4 : §<. — > Jl, k] defined by 

h ({S n )nm) = S ■ 

Definition5 Let k £ W. The shift function is the map Ok : E>k — > §k defined by 

((^")nGM) = (S" + ')„ G K. 

After having introduced these definitions, we will now give some recalls in the field 
of the mathematical topology lfl9l to make this document self contained, and because 
topology is not of frequent use in cryptology. 

3 A few Words Concerning the Mathematical Theory 
of Chaos 

3.1 Devaney's Chaotic Dynamical Systems 

Some topological definitions and properties taken from the mathematical theory of 
chaos are now recalled in this section. Let (X,z) be a topological space and / a con- 
tinuous function on (X,i). 

Definition 6 / is said to be topologically transitive if, for any pair of open sets U, V C 
X, there exists k>0 such that f k (U)n V ^ 0. 

Definition 7 (X,f) is regular if the set of periodic points is dense in X. 

It is now possible to introduce the well-established mathematical definition of chaos |[8l . 

Definition 8 A function / : X — > X is said to be chaotic on X if it is regular and 
topologically transitive. 

If the topological space is indeed a metric space (X,d), then the sensibility of the 
system under iterations, regarding its initial conditions, can be quantified as follows. 

Definition 9 / has sensitive dependence on initial conditions if there exists 8 > such 
that, for any x £ X and any neighborhood V of x, there exist y £ V and n ^ such that 
d (f"(x),f n (y)) > 8. 8 is called the constant of sensitivity of /. 
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This property is implied by both the regularity and transitivity presented above Q. 
And so, when / is chaotic, fundamentally different behaviors are possible for the sys- 
tem, and they occur in an unpredictable way. 

Let us state now some basic results that surprisingly cannot be found in the litera- 
ture. To simplify the presentation, some notations must be firstly introduced: X z will 
stand for the topological space (X,x), whereas l4(x) is the set of neighborhoods of x 
for the topology x (in unambiguous cases, we will simply use ^(x)). 

Theorem 1 Let X be a set, and X, x' two topologies on X such that x' is finer than x. 
Let f : X — > X, continue for both X and x'. 

If (JQ',/) is chaotic in the sense of Devaney, then (X z ,f) is also chaotic. 

Proof 1 Let COi , ©2 two open sets ofz. Then COi , CO2 € x', because x' is finer than X. As f 
is X 1 —transitive, then 3n G W,COi nf^"\(j)2) = 0- As a consequence, f is X— transitive. 

Let us now establish the regularity of {Xi,f), i.e., for all x £ X and all X— neigh- 
borhood V of x, there exists a periodic point for f in V. Let x G X, and V G 1z(x) a 
X— neighborhood of x. By definition of a neighborhood, 3co G X,x G CO C V. However 
X C x', so CO G x', and so V G 1^/ (x). But [X^i , /) is regular, So there exists a periodic 
point for f in V, and the regularity of (X x ,f) is proven. 

Let us finally recall another topological quantitative property of chaos: 
Definition 10 A function /is said to be expansi ve if 3e > 0,Vx ^y, 3n G IN, d(f n (x),f n (y)) ^ 

£. 

Sometimes, instead of trying to prove properties directly on the system itself, it is 
preferable to reduce the initial problem to another one whose characteristics are known 
or appear more accessible. Such a reduction tool is called, in the mathematical theory 
of chaos, the semi-conjugacy. 

3.2 The topological semi-conjugacy 

Definition 1 The discrete dynamical system (X,f) is topologically semi-conjugate to 
the system (0 r ,g) if it exists a function cp : X — > r , both continuous and onto, such 
that: cp o / = g o cp, that is, which makes commutative the following diagram MOH : 



X - 


-L^x 


i 




y - 


► 7 



g 



In this case, the system (y,g) is called a factor of the system (X,f). 

Several dynamic behaviors are inherited by systems factors iflOl . They are summarized 
in the following proposition: 

Proposition 1 Let (O^jg) a factor of the system (X,f). Then: 
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1. p G Perk(f) (p(p) G Perj{g), where j ^ k, where Per„(h) stands for the set 
of points of period n for the iteration function h. 

2. (X,f) regular => (y,g) regular, 

3. (X,f) transitive =>• (y " ,g) transitive. 

So if (X,f) is chaotic in the sense of Devaney, then {y,g) is chaotic too. 

3.3 The Lyapunov Exponent 

Some dynamical systems are very sensitive to small changes in their initial condi- 
tions, which is illustrated by both the constants of sensitivity to initial conditions and 
of expansivity introduced respectively in Definitions [9] and [TOj However, these vari- 
ations can quickly take enormous proportions, grow exponentially, and none of these 
constants can illustrate that. Alexander Lyapunov has examined this phenomenon and 
introduced an exponent that measures the rate at which these small variations can grow. 

Definition 11 Given / : H — > R, the Lyapunov exponent of the system composed by 
x° G E and x n+l = f{x") is defined by: 



Consider a dynamical system with an infinitesimal error on the initial condition 
xq. When the Lyapunov exponent is positive, this error will increase exponentially 
(situation of chaos), whereas it will decrease if X(xo) ^ 0. 

Let us now recall the information hiding security framework developed this last 
decade. 



In the prisoner problem of Simmons lETI . Alice and Bob are in jail, and they want to, 
possibly, devise an escape plan by exchanging hidden messages in innocent-looking 
cover contents. These messages are to be conveyed to one another by a common war- 
den, Eve, who over-drops all contents and can choose to interrupt the communication 
if they appear to be stego-contents. 

In the steganography framework, in the context of the Simmons' prisoner problem, 
attacks have been classified in (7) as follows: 

Definition 12 WOA: A Watermark-Only Attack occurs when an attacker has only ac- 
cess to several watermarked contents. 

KMA: A Known-Message Attack occurs when an attacker has access to several pairs 
of watermarked contents and corresponding hidden messages. 

KOA: A Known-Original Attack is when an attacker has access to several pairs of 
watermarked contents and their corresponding original versions. 




4 Information Hiding Security 
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CMA: A Constant-Message Attack occurs when the attacker observes several water- 
marked contents and only knows that the unknown hidden message is the same 
in all contents. 

EOA: An Estimated Original Attacks occurs when the attacker has access to an esti- 
mation of the original host signal, with possibly some estimation errors. 

In the framework of WOA, the stego-security Q is relevant to evaluate the security 
of information hiding processes. It is the highest security level in WOA setup. To 
recall it, we need the following notations: K is the set of embedding keys, p(X) is the 
probabilistic model of No initial host contents, p(Y\K\) is the probabilistic model of 
iVo watermarked contents. Furthermore, it is supposed in this context that each host 
content has been watermarked with the same secret key K\ and the same embedding 
function e. It is now possible to define the notion of stego-security: 

Definition 13 (Stego-Security) The embedding function e is stego-secure if and only 
if: 

VATi €K,p(Y\K 1 )=p(X). 

In the other frameworks, KOA, KMA, and CMA, the topological security should 
be investigated 0111 . In this article, we focus more specifically on this last point, which 
is recalled bellow. 

To check whether an information hiding scheme S is topologically secure or not, 
S must be written as an iterate process = f(x") on a metric space (X,d). This 
formulation is always possible HJ. So, 

Definition 14 (Topological Security) An information hiding scheme S is said to be 
topologically secure on (X,d) if its iterative process has a chaotic behavior according 
to Devaney. 

In the approach presented by Guyeux et ai, a data hiding scheme is secure if it is 
unpredictable. Its iterative process must satisfy the Devaney's chaos property and its 
level of topological security increases with the number of chaotic properties satisfied 
by it. 

This new concept of security for data hiding schemes has been proposed in J4] as a 
complementary approach to the existing framework. It contributes to the reinforcement 
of confidence into existing secure data hiding schemes. Additionally, the study of 
security in KMA, KOA, and CMA setups is realizable in this context. Finally, this 
framework can replace stego-security in situations that are not encompassed by it. In 
particular, this framework is more relevant to give evaluation of data hiding schemes 
claimed as chaotic. 

In the framework of the last attack EOA, the evaluation of the Lyapunov exponent, 
which is the subject of this research work, is relevant to quantify the level of security 
of steganographic processes proven to be topologically secure. Indeed, the Lyapunov 
exponent participates to the measurement of this topological security. In an EAO setup, 
the attacker has just access to estimation of the original content. With just this knowl- 
edge, he should not be in measure to recover any information about the secret message 
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or the secret key. The topological security with the two notions of sensibility and ex- 
pansivity introduced in Definitions [9] and [10] are relevant to face the attacker in this 
context. However, these two topological properties give no precise quantification. It is 
the major interest of the Lyapunov exponent. 



5 The Steganographic Scheme CI Si 

To explain how to use chaotic iterations for information hiding, we must firstly define 
the significance of a given coefficient, and the notion of most and least significant 
coefficients (MSCs and LSCs). 

We first notice that terms of the original content x that may be replaced by terms 
issued from the secret message y are less important than others: they could be changed 
without be perceived as such. For a given host content x, MSCs are then ranks of x 
that describe the relevant part of the image, whereas LSCs translate its less significant 
parts. These two definitions are illustrated on Figure Q] where the LSCs correspond to 
the last three bits of each pixel. 




(a) Original. (b) MSCs. (c) LSCs (x 17). 



Figure 1 : Most and least significant coefficients of Lena. 



The steganographic scheme CISi that generalize the watermarking scheme based 
on chaotic iterations as described in [1] can now be recalled. In this part the following 
notations will be used: x° £ B N is the N LSCs of a given cover media C, m° £ B p is the 
secret message to embed into x°, S p £ §n is the place strategy, S c £ Sp is the choice 
strategy, and lastly, S m £ Sp is a the mixing strategy. 

The steganographic scheme is defined by V(n,i,j) £ IN* x [0; N — 1] x [0; P - 1]: 



m"r l if S" mJ tj 



1 .. p . and m" 
m S n if S% 



j 



"T 1 if^ = J. 



where m" 1 is the Boolean negation of m" 1 

The new LSCs of the stego-content are the Boolean vector y = xr £ . 



6 Topological Model of CIS2 and Security on Xi 

In this section is recalled the topology used in order to model the steganographic 
scheme CIS2 by a discrete dynamical system in a topological space 0. 
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Let 

7 : [0; N - 1] x B N x [0; P - 1] x B p — ► B N 

(k,x,\,m)\ — > [8(kJ).x j + 8(kJ).tn x ) 

V /ye[0;N-i] 

where + and . are the Boolean addition and product. 

Consider the phase space Xi defined as follow: X? = §w x B N x Sp x B p x §/>, 
where an d §p are the sets introduced in Section [2] 

The map Q fo : X 2 — > X 2 is defined by: Q h (S p ,x,S c ,m,S m ) = (a N (S p ), 
!F(i N (Sp),xJp(S c ),m),ap(S c ),Gf (m,S m ),ap(S m )) . Then CISi can be described by 
the iterations of the following discrete dynamical system: 

X° eX 2 andX k+i = Q fo {X k ). 

By comparing Xi and X\, it has been proven in IfTTI that: 

Proposition 1 X 2 has, at least, the cardinality of the continuum. 

A new distance has been defined on Xi as follow: \/X,X £X2,ifX = (S p ,x,S c ,m,S m ) 
and X = (S p ,x,S c ,m,S m ), then: d2(X,X) = d B N(x,x) + d B p(m,m) +d§ N (S p ,S p ) + 

N-l 

ds p (5 c ,5 c )+d§ p (5 m , S m ), where: d B u(E,E) = £ &{E k ,E k ) 6 [0;N] and d§ N {S,S) = 

k=0 

9 °° \s k — S k \ 

— lQk G [0; 1] are respectively distances on B N and § N (VN e IN*). 

k=\ 

To demonstrate that CIS2 is another example of topological chaos in the sense of 
Devaney, it has been firstly established in IfTTI that, 

Proposition 2 Qf Q is continuous on (Xi^d'i)- 

Then it has been proven that (X2, Qf ) is topologically transitive, regular, and has 
sensitive dependence on initial conditions. Then we have the result: 

Theorem 1 Qf a is a chaotic map on (Xi^d^) in the sense of Devaney, and consequently 
the scheme CIS2 is topologically secure. 

An other theorem about the security of CIS2 can be given here. This result has 
been established in IfTTI . 

Theorem 2 CIS2 is stego-secure. 

7 A Topological Semi-conjugacy between Xi and R 

In this section, by using a topological semi-conjugacy, we show that CIS2 modeled 
by Qf a on X can be described as iterations on a real interval. As our researches are 
inspired by the work of the authors of |fl], the proofs detailed in this document will 
follow a same canvas. To do so, some notations and terminologies must be introduced. 

LetX (N;P) =§a,xB n x §p x B p x §/>. In what follows and for easy understanding, 
we will assume that N = 3 and P = 2. Indeed, N has obviously to be greater than P. So 
N + P = 5 and NP 2 = 12. However, an equivalent formulation of the following can be 
easily obtained by replacing the bases 5 and 12 by any base (N + P) and (NP 2 ). 



Definition 15 The function \|r : [1,NJ x [1,PJ x [1, P] — > [0, NP 2 — 1] is denned by: 

V (^SiX) = ( S P - 1 ) P2 + ( S 'c - 1 ) P + ( S 'n - 1 )■ 

This function aims to convert a triple strategy value in a simple strategy expressed 
in another base. \|/ is a bijective function. The reverse operation will be denoted by 

The three projections of are so defined by: ^S p ,S' c ,S' m ^ = S' p , 



Base 


Base 


Base 


Base 


Base 


Base 


Base 


Base 


N = 3 


P = 2 


P = 2 


NP 2 = 12 


N = 3 


P = 2 


P = 2 


NP 2 = 12 












Si 


°m 




1 


1 


1 





2 


2 


1 


6 


1 


1 


2 


1 


2 


2 


2 


7 


1 


2 


1 


2 


3 


1 


1 


8 


1 


2 


2 


3 


3 


1 


2 


9 


2 


1 


1 


4 


3 


2 


1 


10 


2 


1 


2 


5 


3 


2 


2 


11 



Table 1: Illustration of the function \|/ (see Definition[T5ll. 



Definition 16 The function (p : X 3;2 



0,2 ! 



§ 2 x B 2 x § 2 



0,2 ; 



is defined by: (p : = §3 x 
(S°,S£,... );(£ ,£i, 



where (S p ,E,S c ,M,S m ) 

£3); (S c ,^, . . .); (M , Mi); (S° ,5*) ...)), and q> (S p ,£,S e ,M,S m ) is the real num- 
ber whose integral part e is L^=o 2 4_ *£jt + L^=3 2 4_<: M<._3, that is, the binary digits of e 
are £b£i £2 M, Mi, and whose decimal part s is equal to: s = 0,y(s p ,S°,tf£) ^ (s^S^S}^ \|/(s 2 ,S 2 ,S 2 
= EtTj 12 _k 5 . s is thus expressed in base 12. 



(p realizes the association between a point of Xfcp) and a real number into 



0,2- 



We must now translate the steganographic process CIS2 represented by Qf a iterations 



on this real interval. To do so, two intermediate functions over 
and s must be introduced: 



0,2 ! 



denoted by e 



Definition 17 Let x S 



0,2- 



and eo> • • • i e 4 me binary digits of the integral part of x: 

[x\ = L^ = o 2 4 ~*e / t, (/Jtgm the digits of x, expressed in base 12, where the chosen 
decimal decomposition of a is the one that does not have an infinite number of 11: 
x = [x\ +£ J t~ .s ,; 12~ A: ~ 1 . e and s are thus defined as follows: 

e: [o,2 5 



and 



((eo,ei,e 2 );(e3,e 4 )) 



s '■ 

x 



0,2 ! 



[0,11 
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We are now able to define the function g, whose goal is to translate the stegano- 
graphic process CI Si represented by Qf on an interval of R. 



Definition 18 g : 



0,2 5 



0,2 s 



0,2 ; 



is such that g(x) is the real number of 
defined bellow: its integral part has a binary decomposition equal to e' (j , . . . ,e' 4 , with 
Vie [0,21 andY/e [3,4]: 



?{x)i 



if i ± \f\ 



-1 / 



~1 / „0' 



e W2+v 2 -'(,o) if' = ¥i 
whose decimal part is s(x) 1 ,s(x) 2 , . . . 

4 +~ 

In other words, if x = Y 2 4 ~ k e k + £ «* \T~ k ~~ x , then: 



e(x)j if ;V ¥3 1 

e(x)j + l (mod 2) if j = \\i^ 



k=0 



k=0 



g(x) = £ 2 4 - k L (S^vr 1 ^)) + 1 (mod 2) 

k=0 



l0) (s&vrV))) 



+ £ 2 4 -*( et + 8(*, ^(s ) (mod 2)) + £ s*+ J 12- fc - ! 

jfe=3 k=0 

where 8 is the discrete Boolean metric introduced in Definition Q] 



0,2- 



the most usual one being the 



Numerous metrics can be defined on the set 

Euclidian distance A(x,y) = \y — x\ 2 . This Euclidian distance does not reproduce ex- 
actly the notion of proximity induced by our first distance di on Xi- Indeed di is richer 
than A. This is the reason why we have to introduce the following metric: 



Definition 19 Given ije 



0,2 ; 



, D denotes the function from 



0,2 ! 



r 2 



by: D(x,y)=D e (e(x),e(y)) +D S (s(x),s(y)), where: 

4 

D e (e,e) = £ S(e k ,e k ), and D s (s,s) = £ ^— j 
k=0 LZ 



to R+ defined 



k=l 



Proposition 3 D is a distance on 



0,2 5 



PROOF The three axioms defining a distance must be checked. 

• D ^ 0, because everything is positive in its definition. If D(x,y) = 0, then 
D e (x,y) — 0, so the integral parts of x and y are equal (they have the same binary 
decomposition). Additionally, D s (x,y) = 0, then Mk g ffl*,s(x) k = s(y) k . In other 
words, x and y have the same Ic— th decimal digit, Vt £ I*. And so x = y. 



D(x,y)=D(y,x). 
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• Finally, the triangular inequality is obtained due to the fact that both 8 and \x — y\ 
satisfy it. 

The convergence of sequences according to D is not the same than the usual con- 
vergence related to the Euclidian metric. For instance, if x" — > x according to D, then 
necessarily the integral part of each x" is equal to the integral part of x (at least after 
a given threshold), and the decimal part of x" corresponds to the one of x "as far as 
required". D is richer and more refined than the Euclidian distance, and thus is more 
precise. 

cp has been constructed in order to be continuous and onto, so we obtained the 
following theorem: 

Theorem 3 The steganographic process CI Si represented by {^Qf iv Xi) is simple iter- 
ations on R, which is illustrated by the semi-conjugacy given bellow: 



( -*(3;2) i d 2 ) 

'I 



0,2 5 



D 



X 



(3;2) 



1' 



0,2 5 



D 



In other words, Xi is approximately equal to 



0,2 



N + P 



It can be remarked that the function g is a piecewise linear function: it is linear on 

It tl + 1 T rr C 

n e [0;2 x 12| and its slope is equal to 12. 



12' 12 



each interval having the form 
Let us justify these claims: 

Proposition 4 The process CISi represented by g defined on R has derivatives of all 
0,2 5 



orders on 
I -- 



n 

72 



except on the 385 points in I defined by: 
« E [0;2 5 x 12]|. 

n + 1 



Furthermore, on each interval of the form 



12' 12 

a linear function, having a slope equal to 12: Vx I,g'(x) = 12. 



, with n £ [0;2 5 x 12[, g is 



Proof Let /„ = 



1 



, with n £ [0;2 5 x 12]. All the points of /„ have the same 

integral part e and the same decimal part s°: on the set /„, functions e(x) and x h-> s(x)° 
of DefinitionfTTlonlv depend on n. So all the images g(x) of these points x: 

• Have the same integral part, which is e, except probably the bit number s°. In 
other words, this integer has approximately the same binary decomposition than 
e, the sole exception being the digit s° (this number is then either e + 2 l2 ~ s or 
e —2 12 ~ s , depending on the parity of s°, i.e., it is equal to e + (— l) 4 x 2 12_s ). 

• A shift to the left has been applied to the decimal part y, losing by doing so the 
common first digit s°. In other words, y has been mapped into 12 x y — s°. 
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To sum up, the action of g on the points of / is as follows: first, make a multiplication by 
12, and second, add the same constant to each term, which is — + (— 1 ) s ° x 2 12 ~ 4 '°^ - 
s°. 

We are now able to evaluate the Lyapunov exponent of our digital watermarking 
scheme based on chaotic iterations, which is now described by the iterations on R of 
the g function introduced in Definition [T8l 

8 Topological security of CI Si on R 

According to TheoremQ] CI Si represented by the function Qf Q on Xi is topologically 
secure, that is to say ( Qf Q , Xi) is chaotic in the sense of Devaney. We can deduce that 
it is the same for CISi represented by the g function on 1R for the order topology. 

Indeed ((7/^X2) and (g, [0,2 5 [o^ are semi-conjugate by (p as proven in the previous 

section, so (g, [0,2 5 [d^ is a chaotic system according to Devaney, because the semi- 

conjugacy preserves the character according to PropositionQ~]in Section [3721 However 
the topology generated by D is finer than the topology generated by the Euclidean 
distance A - which is the order topology. Finally, according to Theorem [Tj we can 
affirm that the steganographic process CI Si represented by g is chaotic in the sense of 
Devaney for the order topology on It. 

Having these claims in mind, we can formulate the following theorem: 

Theorem 2 The steganographic process CI Si represented by g on 1R is chaotic in the 
sense of Devaney, when the usual topology ofR is used (the order topology). 

This result is weaker than Theorem[T] which establish the chaotic property of CI Si 
for a finer topology. It is as if the chaos observed using usual tools like the Euclidian 
distance is still preserved when considering more powerful tools (higher resulution, 
i.e., finer topologies). 

The result contained in Theorem [2] is however interesting, as it confirms that the 
followed approach does not lead to weaker properties. Indeed, this study has taken 
place in a system other than the one usually considered (Xi instead of R), in order to be 
as closed as possible to the final computer machines. By doing so, we prevent from any 
loss of chaotic properties when computing the scheme written in mathematical terms. 
However, it might be feared that the choice of a discrete mathematics approach leads 
to a disorder of lower quality. In other words, we have achieved to leave a situation of 
great disorder lost during the computation into machines. However, the cost of such 
achievement were probably to obtain a disorder of poor quality. Theorem [2] claims 
exactly the contrary. 
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9 Evaluation of the Lyapunov Exponent 



Let L = \ x° G 



0,2 5 



V« G IN , f. I j, where / is the set of points in the real inter- 
val where g is not differentiable (as it is explained in PropositionH). Then, 

Theorem 4 Vx° G L, the Lyapunov exponent of CI Si having x° for initial condition 
is equal to X(x ) = ln(12). 

PROOF g is piecewise linear, with a slop of 12 (g'(x) = 12 where the function g is 
differentiable). Then Vjc G L, X(x) = lim„_, +0 „ - £? =1 In g' (x'- 1 ' 

= lim„^ +00 ir? , In 1121 = lim„^+oo -«ln|12| = In 12. 
n n 

Remark 1 The set of initial conditions for which this exponent is not calculable is 

countable. This is indeed the initial conditions such that an iteration value will be a 
n 

number having the form — , with « G IN. Moreover, for a system having N + P cells (a 

number of LSCs equal to N and a secret message to embed of width equal to P), we will 
find, mutatis mutandis, an infinite uncountable set of initial conditions x° G [0;2 N+P [ 
such that X(x°) = ln(NP 2 ). 

So, it is possible to make the Lyapunov exponent of the scheme CI Si as large as 
possible, depending on the number of least significant coefficients of the cover me- 
dia we decide to consider, and on the width of the message to embed. Obviously, a 
large Lyapunov exponent makes it impossible to achieve the well-known "Estimated 
Original Attacks" Q. 



10 Conclusion and Future Work 

To conclude, we have now available a new quantitative evaluation for the stegano- 
graphic scheme CISi previously proposed, which is based on chaotic iteration: its 
Lyapunov exponent is equal to ln(NP 2 ), where N is the number of least significant 
coefficients of the cover media and P the width of the secret message to embed. This 
exponent allows to quantify the amplification of the ignorance on the exact initial con- 
dition (the media without watermark) after several iterations of the steganographic pro- 
cess. It illustrates the disorder generated by iterations of the process, reinforcing its 
chaotic nature. Thanks to its topological security, this scheme is already able to face 
an attacker in the context of a "Known-Message Attack", a "Known-Original Attack", 
and a "Constant-Message Attack". In addition, this result implies that it is also able to 
resist in the context of an "Estimated Original Attacks". 

Using the semi-conjugacy described here, it will be possible in a future work to 
compare the topological behavior of CI Si on Xi and R, and to explore the topological 
security of the steganography scheme using this new topology. Then, an analogue study 
of the two other topologically secure schemes cited here will be conducted in order to 
compare these processes, being thus able to choose the best one according to the type 
of applications under consideration. Finally, security in steganography context will be 
investigated too, and topological security will be applied in this framework. 
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